PT-2012-5059 · Sand Studio · Airdroid

Published 2012-07-26 · Updated 2012-07-27 · CVE-2012-3885

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions AirDroid version 1.0.4 beta

Description The default configuration of AirDroid uses a weak password, making it easier for remote attackers to gain access via a brute-force attack.

Recommendations For AirDroid version 1.0.4 beta, consider changing the default password to a stronger one to prevent brute-force attacks.

Exploit

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2012-3885

Affected Products

Airdroid

References · 3

• 🔥 http://tele-consulting.com/advisories/TC-SA-2012-02.txt · Exploit
• 🔥 http://archives.neohapsis.com/archives/bugtraq/2012-07/0087.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2012-3885 · Security Note